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Real-time assessment of millions of global IT assets on premise, mobile or in the cloud 
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Qualys Cloud Agent enables instant, 
global visibility of IT assets — even 
occasionally connected mobile and 
virtual devices, with up-to-date asset 
configuration data for security and 
compliance. A low-footprint agent 
installed on endpoints, Cloud Agent 
brings the high-performance 
functionality of all Qualys Cloud 
Platform services to all IT assets in the 
global enterprise. 


Why You Need Cloud Agent 


The lack of visibility into risks affecting global 
enterprise IT assets is a major challenge to securing 
an organization of any size. Scanning performance is a 
big factor, especially when scanning hundreds of 
thousands of assets, and results in the identification 
of millions of potential issues that each require 
prioritization and remediation. The biggest challenge 
with occasionally connected devices, however, is that 
traditional scanning solutions require systems to be 
accessible when the scan is executed. Otherwise, 
they’re invisible and no relevant data about those 
assets is collected. Using the Qualys Cloud Agent 
solves these problems, helping your organization to 
stay on top of enterprise security and compliance. 


Key Features 


Minimal impact on systems and networks. The 
Qualys Cloud Agent can be installed anywhere — 
including any host such as a laptop, desktop, server or 
virtual machine — and can be deployed via a compact, 
silent installer, which can be embedded in system 
images, deployed via common software management 
automation most organizations have in place, or 
simply run from the command line. 


The agent is designed to have minimal impact on the 
system and the network, normally consuming less 
than 2% of CPU resources with peaks in the range of 
5% during normal operation. Once installed, the 
agent will take a full configuration assessment of its 
host while running in the background and uploading 
that snapshot to the Qualys Cloud Platform. The 
agent is selfe updating and selfe healing, keeping 
itself up to date with no need to reboot. Agents 
check in with the Cloud Platform and update the 
snapshot with new information as changes occur, 
removing the need to poll the system to update asset 
inventory data. Having an always current picture of 
the system configuration allows inquiries even when 
the endpoint is offline or unreachable. 


Asset Management. AssetView is Qualys’ free 
inventory service that provides easy, always available 
access to the inventory data collected by the Qualys 
Cloud Agents, as well as data collected by optional 
Vulnerability Management and Policy Compliance 
features. AssetView scales to millions of assets, 
making it useful for the largest global enterprise 
environments. It provides a new layer of intelligence 
into the current state of endpoints — including mobile 
and virtual — cataloging details about services, file 
systems and the registry, as well as a wealth of 
additional information to manage and secure 
systems. By leveraging the Qualys Cloud Platform, no 
expensive management infrastructure is required. 


Dynamic Tagging. Agente based dynamic asset 
tagging provides you with a consistent, real time view 
of your network and how each asset relates to your 
business. By automatically organizing assets in 
different ways, the platform lets you efficiently align 


the operations of your scanning, reporting and 
remediation tracking with the way you view your 
business. The result: your IT, security and compliance 
teams are informed quickly and effectively about the 
issues they need to know about most. 


Cloud Agent for Vulnerability Management 
(VM). Cloud Agent for VM eliminates the need for 
establishing scanning windows or integrating with 
credential vaults for gaining access to systems — or to 
know where a particular asset resides. With agent- 
based vulnerability assessment, you will be able to 
provide 100 percent coverage of your installed 
infrastructure. Unlike remote scanning, which 
requires credential management and complex firewall 
profiles to permit scans to pass through, agent-based 
VM runs locally with the right privileges to do its 
work, and only requires outbound encrypted 
communications over a single port to the Qualys 
Cloud Platform. With accurate, instantly updated 
information from the Cloud Agent, you will always 
know what vulnerabilities and configuration issues 
exist on difficult-to-assess targets. 


Cloud Agent for Policy Compliance (PC). Cloud 
Agent for Policy Compliance turns Qualys’ PC offering 
into a real time compliance assessment solution. Now 
you can continuously evaluate configurations of all 
relevant assets (including mobile and virtual) against 
standards and benchmarks such as PCI-DSS, CIS, ISO, 
HIPAA and many others. As with VM, the Cloud 
Agent’s approach is always up to date and requires no 
credential management or complex remote access 
through the firewall. 


Cloud Agent for Elastic Virtual Cloud 
Environments. Cloud Agent greatly simplifies asset 
discovery, tracking, security and compliance 
monitoring in dynamic cloud environments like 
Amazon EC2 and Microsoft Azure. Visibility is enabled 
by embedding the agent into master images of your 
cloud servers. When a new instance is created from 
the master image, it automatically activates the 
agent, which instantly registers and tracks the 
security and compliance of every instance. This 
functionality eliminates the need to implement a 
separate discovery mechanism or to build automation 
around spawning new scanners to scan the new 
instances. Additionally, the information is always up 
to date, even when your virtual workloads are offline 
to free up computing resources. When an image is 
brought back online, it updates the snapshot, keeping 
your information current. 


Extensible Data Sharing with Third-Party Tools. 
All the data collected by the Qualys Cloud Agent 
installed in an IT environment resides within the 
Qualys Cloud Platform. Qualys’ extensive and easy-to- 
use API makes it easy to integrate your data with 
third-party tools including Security and Information 
Management (SEIM), big data analytics platforms 
such as Splunk, CMDBs and help desk systems. 


OTHER QUALYS SOLUTIONS 


Qualys Integrated Solutions Suite 

The Qualys Integrated Solutions Suite is supported by 
the Qualys Cloud Platform and Qualys Cloud Agent. 
The integrated suite of IT security and compliance 
solutions includes: 

e CM -Continuous Monitoring 

e VM -Vulnerability Management 

e PC-— Policy Compliance 

e PCI-—PCI Compliance 

e SEAL — Qualys Secure Seal 

e WAS — Web App Scanning 

e WAF — Web App Firewall 

e MD -— Malware Detection 

e SQA- Security Assessment Questionnaire Service 


Qualys Cloud Security & Compliance 


Platform 

The Qualys Cloud Platform hosts a suite of IT security 
and compliance solutions that leverage shared and 
extensible core services and a highly scalable multi- 
tenant cloud architecture. The core services include: 
e Asset Tagging & Management 

e Remediation & Workflow 

e Reporting & Dashboards 

e Big Data Correlation & Analytics Engine 

e Questionnaires & Collaboration 

e Alerts & Notifications 


Try It and See How It Works for You! 


For a free trial of Qualys Cloud Agent, visit 
https://www.qualys.com/forms/cloud-agent/ 


AssetView is free! Register here: 
https://www.qualys.com/forms/assetview/ 


About Qualys 

Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading 
provider of cloud security and compliance solutions 
with over 7,700 customers in more than 100 
countries, including a majority of each of the Forbes 
Global 100 and Fortune 100. The Qualys Cloud 
Platform and integrated suite of solutions help 
organizations simplify security operations and lower 
the cost of compliance by delivering critical security 
intelligence on demand and automating the full 
spectrum of auditing, compliance and protection for 
IT systems and web applications. For more 
information, please visit www.qualys.com. 


Qualys and the Qualys logo are proprietary trademarks of 


Qualys, Inc. All other products or names may be trademarks 
of their respective companies. 
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